Looking for a job

Erick Sanz

@ericksanz

Cybersecurity architect at GM Financial securing AI Gateway, MCP Gateway, and agentic AI deployments.

At GM Financial, I lead security architecture for AI/ML adoption, defining and implementing data protection, access governance, and runtime security controls for AI Gateway, MCP Gateway, agentic AI, and chatbot deployments.

I also architected and led deployment of a full enterprise Azure tenant, defining its security architecture, governance model, and controls. I develop database security strategies to protect sensitive financial data and author security policies that support business initiatives.

Earlier, at ISSQUARED, Inc., I built an on-premises risk calculation and mitigation framework aligned with NIST, PCI, and HC3. My work has also included cloud security assessments, customer migrations to AWS and Azure, and worldwide deployment of Imperva security products.

Experience

Work history, roles, and key accomplishments

Current

Technical Senior Principal, Cybersecurity Architecture

Current

GM Financial

Dec 2024 - Present (1 year 9 months)

Lead security architecture for AI/ML adoption, defining controls for AI Gateway, MCP Gateway, agentic AI, and chatbots. Architected enterprise Azure tenant and developed database security strategies.

AI ML Security Azure Cloud Security Database Security Access Governance Runtime Security MCP Gateway Agentic AI Cybersecurity Architecture

Security Engineering Manager, DevSecOps

G-Research (via Davanti)

Sep 2023 - Dec 2024 (1 year 3 months)

Managed international team delivering security at CI/CD pipeline level. Architected secrets management and code-security tooling deployments, achieving 100% SLI for Vault.

DevSecOps CI CD Secrets Management Vault Thales Akeyless Black Duck SLA Team Management

Senior Security Engineer

Imperva

Jul 2021 - Sep 2023 (2 years 2 months)

Deployed cybersecurity products for Fortune 500 companies across AWS, Azure, and GCP. Specialized in cloud, Kubernetes, container, and Security as Code architecture.

AWS Azure GCP Kubernetes Containers Security As Code Cloud Security Application Security Data Security

Senior Director, Cybersecurity and Cloud

ISSQUARED, Inc.

Mar 2020 - Jul 2021 (1 year 4 months)

Directed worldwide engineering team delivering cloud and cybersecurity projects. Led customer migrations to AWS and Azure and built risk framework aligned with NIST, PCI, and HC3.

Cloud Migration AWS Azure NIST PCI HC3 Risk Management Team Leadership Standardization

Cloud Cybersecurity Director

Technologent

Aug 2018 - Mar 2020 (1 year 7 months)

Principal strategist driving growth by delivering Cloud Cybersecurity Framework assessments. Built proprietary framework to evaluate risk and guide secure cloud migrations.

Cloud Security Risk Assessment Cybersecurity Framework Project Management Stakeholder Communication

Principal Cloud Security Architect

Set Solutions, Inc.

Mar 2016 - Aug 2018 (2 years 5 months)

Assessed cyber threats and vulnerabilities, analyzed data, and drove implementation of security solutions. Deployed cloud solutions via Terraform for oil and gas customers.

Terraform Cloud Security Risk Assessment Security Training QA Tools

Principal Security Analyst

Waste Management

Feb 2015 - Mar 2016 (1 year 1 month)

Team leader responsible for all security aspects, from forensic analysis to deployment of new cybersecurity solutions. Built proprietary SIEM using LAMP stack and rsyslog.

SIEM Linux Apache MySQL PHP Rsyslog Forensic Analysis Security Architecture Training

Senior Professional Services Engineer / Senior Courseware Trainer

Imperva

Feb 2011 - Feb 2015 (4 years)

Spearheaded customer infrastructure strategy, architecture, and service delivery standards. Deployed Database Activity Monitoring and Web Application Firewalls worldwide and delivered training.

Data Activity Monitoring (DAM)Web Application Firewall Training Customer Strategy Solution Deployment